Hartmut
bfdf0a82da
Tests, CSP nonce middleware, SSRF guard, perf-route hardening, Docker env isolation, migration runbook, RBAC E2E coverage. Tickets resolved: - #19: MfaSetup.test.ts — static source tests confirming local QR rendering - #20: ssrf-guard.test.ts (16 tests) + webhook-procedure-support mock fix - #21: /api/perf route.test.ts (5 tests) — header-only auth, fail-closed - #22: middleware.ts (nonce-based CSP) + middleware.test.ts (6 tests); layout.tsx async + nonce prop; CSP removed from next.config.ts - #23: Active-session registry enforcement verified (already in codebase) - #24: docker-compose.yml REDIS_URL hardcoded (no host-env substitution) - #25: docker-compose.yml REDIS_URL + docs/developer-runbook.md created - #26: e2e/dev-system/rbac-data-access.spec.ts (12 tests, 3 roles × 4 procedures) Quality gates: tsc clean, api 1447/1447, web 189/189 passing. Turbo concurrency capped at 2 (package.json) to prevent OOM under parallel test runs. Co-Authored-By: claude-flow <ruv@ruv.net>
70 lines
2.3 KiB
TypeScript
70 lines
2.3 KiB
TypeScript
import type { Metadata, Viewport } from "next";
|
|
import { headers } from "next/headers";
|
|
import { Manrope, Source_Sans_3 } from "next/font/google";
|
|
import { TRPCProvider } from "~/lib/trpc/provider.js";
|
|
import { ServiceWorkerRegistration } from "~/components/layout/ServiceWorkerRegistration.js";
|
|
import { InstallPrompt } from "~/components/layout/InstallPrompt.js";
|
|
import "./globals.css";
|
|
|
|
const uiFont = Source_Sans_3({
|
|
subsets: ["latin"],
|
|
variable: "--font-ui",
|
|
display: "swap",
|
|
});
|
|
|
|
const displayFont = Manrope({
|
|
subsets: ["latin"],
|
|
variable: "--font-display",
|
|
display: "swap",
|
|
});
|
|
|
|
export const metadata: Metadata = {
|
|
metadataBase: new URL("https://capakraken.hartmut-noerenberg.com"),
|
|
title: "CapaKraken — Resource & Capacity Planning",
|
|
description: "Interactive resource planning and project staffing tool",
|
|
manifest: "/manifest.json",
|
|
appleWebApp: {
|
|
capable: true,
|
|
statusBarStyle: "default",
|
|
title: "CapaKraken",
|
|
},
|
|
openGraph: {
|
|
title: "CapaKraken — Resource & Capacity Planning",
|
|
description: "Estimates, staffing, chargeability, and timelines in one workspace.",
|
|
images: [{ url: "/og-image.png", width: 1024, height: 1024, alt: "CapaKraken Logo" }],
|
|
type: "website",
|
|
},
|
|
twitter: {
|
|
card: "summary_large_image",
|
|
title: "CapaKraken — Resource & Capacity Planning",
|
|
description: "Estimates, staffing, chargeability, and timelines in one workspace.",
|
|
images: ["/og-image.png"],
|
|
},
|
|
};
|
|
|
|
export const viewport: Viewport = {
|
|
themeColor: "#0284c7",
|
|
};
|
|
|
|
export default async function RootLayout({ children }: { children: React.ReactNode }) {
|
|
const nonce = (await headers()).get("x-nonce") ?? undefined;
|
|
return (
|
|
<html lang="en" suppressHydrationWarning>
|
|
<head>
|
|
<script nonce={nonce} dangerouslySetInnerHTML={{__html: `
|
|
try {
|
|
var p = JSON.parse(localStorage.getItem('capakraken_theme') || '{}');
|
|
if (p.mode === 'dark') document.documentElement.classList.add('dark');
|
|
if (p.accent) document.documentElement.setAttribute('data-accent', p.accent);
|
|
} catch(e) {}
|
|
`}} />
|
|
</head>
|
|
<body className={`${uiFont.variable} ${displayFont.variable} min-h-screen bg-gray-50 font-sans antialiased`}>
|
|
<TRPCProvider>{children}</TRPCProvider>
|
|
<ServiceWorkerRegistration />
|
|
<InstallPrompt />
|
|
</body>
|
|
</html>
|
|
);
|
|
}
|